112 matches found
Malicious code in ethers-provider2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64291b6905fba089a2dada5e0215c20954bf12f15f76d27c5c341d2b91baa81b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2731 Malicious code in ethers-provider2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64291b6905fba089a2dada5e0215c20954bf12f15f76d27c5c341d2b91baa81b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious npm Package Modifies Local 'ethers' Library to Launch Reverse Shell Attacks
Cybersecurity researchers have discovered two malicious packages on the npm registry that are designed to infect another locally installed package, underscoring the continued evolution of software supply chain attacks targeting the open-source ecosystem. The packages in question are...
Malicious code in @theoretical123/ethers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f44d0e1293ff85f758987b79eb290ef0efac3652257af79e2c30e98267c89a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in hardhat-ethers-react-ts-starter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8762e2209b41b4f6eb94a4d56674ed8d23f5ecba64034e0825fe7490fea5c78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2315 Malicious code in hardhat-ethers-react-ts-starter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8762e2209b41b4f6eb94a4d56674ed8d23f5ecba64034e0825fe7490fea5c78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
org.webjars.npm:bitcore-lib (=0.15.0), org.webjars.npm:bitcore-mnemonic (=1.5.0) +3 more potentially affected by unknown CVE via org.webjars.npm:elliptic (>=6.4.0 <=6.5.4)
org.webjars.npm:elliptic MAVEN version =6.4.0, =6.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:elliptic and may be impacted: - org.webjars.npm:bitcore-lib =0.15.0 - org.webjars.npm:bitcore-mnemonic =1.5.0 - org.webjars.npm:eccryp...
Malicious code in ethers-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b52650e58d88e598b736b50375a5b7be334cd6d8581a470d2c70624a1bbecbf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10617 Malicious code in ethers-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b52650e58d88e598b736b50375a5b7be334cd6d8581a470d2c70624a1bbecbf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ethers-audit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 058ac1d6271bf68f9476a6f0a9e4df3a4764f5a06405e90fcac87968f2a9608d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10616 Malicious code in ethers-audit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 058ac1d6271bf68f9476a6f0a9e4df3a4764f5a06405e90fcac87968f2a9608d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10509 Malicious code in ethers-multicaal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6a3ae6518d1268c8a0dd1eedcc72da3fb1c5f939868743ea2699108f1d3741b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ethers-multicaal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6a3ae6518d1268c8a0dd1eedcc72da3fb1c5f939868743ea2699108f1d3741b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious npm Packages Target Developers' Ethereum Wallets with SSH Backdoor
Cybersecurity researchers have discovered a number of suspicious packages published to the npm registry that are designed to harvest Ethereum private keys and gain remote access to the machine via the secure shell SSH protocol. The packages attempt to "gain SSH access to the victim's machine by...
Malicious code in ethers-eth (npm)
The package contains additional code to exfiltrate user private keys to an attack-controlled server...
Malicious code in ethers-6 (npm)
The package contains additional code to exfiltrate user private keys to an attack-controlled server...
MAL-2024-9425 Malicious code in ethers-web3 (npm)
The package contains additional code to append a hardcoded SSH key to the user's authorizedkeys file, creating a backoor, along with exfiltrating user private keys to an attack-controlled server...
Malicious code in ethers-aaa (npm)
The package contains additional code to exfiltrate user private keys to an attack-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 268e60b27602a9e78702588325e96f875b3d37da5815147256c8becfd3d97270 Any computer that has this package installed or...
MAL-2024-9422 Malicious code in ethers-aaa (npm)
The package contains additional code to exfiltrate user private keys to an attack-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 268e60b27602a9e78702588325e96f875b3d37da5815147256c8becfd3d97270 Any computer that has this package installed or...